TI-2001-01197 Aliases CVE-2001-1244 GHSA-g5fj-94hx-c37v

Multiple TCP implementations could allow remote attackers to cause a denial of service…

MEDIUM 42Published 2002-05-03 · Updated 2024-08-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Why it matters now

EPSS 0.21965 97th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 29

CPE	Versions	Role	Vendor
cpe:2.3:o:freebsd:freebsd:4.3:::::::*	4.3	Vulnerable	FreeBSD
cpe:2.3:o:hp:hp-ux:11.00:::::::*	11.00	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.0.4:::::::*	11.0.4	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.11:::::::*	11.11	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:o:hp:vvos:11.04:::::::*	11.04	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:o:linux:linux_kernel:2.4.0:::::::*	2.4.0	Vulnerable	Linux
cpe:2.3:o:linux:linux_kernel:2.4.1:::::::*	2.4.1	Vulnerable	Linux
cpe:2.3:o:linux:linux_kernel:2.4.2:::::::*	2.4.2	Vulnerable	Linux
cpe:2.3:o:linux:linux_kernel:2.4.3:::::::*	2.4.3	Vulnerable	Linux
cpe:2.3:o:linux:linux_kernel:2.4.4:::::::*	2.4.4	Vulnerable	Linux

cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·FreeBSD
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:* Versions 11.00 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:* Versions 11.0.4 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:* Versions 11.11 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:* Versions 11.04 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:* Versions 2.4.0 Vulnerable ·Linux
cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:* Versions 2.4.1 Vulnerable ·Linux
cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:* Versions 2.4.2 Vulnerable ·Linux
cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:* Versions 2.4.3 Vulnerable ·Linux
cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·Linux

Show 19 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel:2.4.5:::::::*	2.4.5	Vulnerable	Linux
cpe:2.3:o:microsoft:windows_2000:::workstation:::::*	all versions	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_2000::sp1::::::*	all versions	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_2000::sp2::::::*	all versions	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:::::::*	4.0	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp1::::::	4.0 sp1	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp2::::::	4.0 sp2	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp3::::::	4.0 sp3	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp4::::::	4.0 sp4	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp5::::::	4.0 sp5	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6::::::	4.0 sp6	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a::::::	4.0 sp6a	Vulnerable	Microsoft
cpe:2.3:o:netbsd:netbsd:1.5:::::::*	1.5	Vulnerable	NetBSD
cpe:2.3:o:netbsd:netbsd:1.5.1:::::::*	1.5.1	Vulnerable	NetBSD
cpe:2.3:o:openbsd:openbsd:2.8:::::::*	2.8	Vulnerable	OpenBSD
cpe:2.3:o:openbsd:openbsd:2.9:::::::*	2.9	Vulnerable	OpenBSD
cpe:2.3:o:sun:sunos:5.5.1:::::::*	5.5.1	Vulnerable	Sun
cpe:2.3:o:sun:sunos:5.7:::::::*	5.7	Vulnerable	Sun
cpe:2.3:o:sun:sunos:5.8:::::::*	5.8	Vulnerable	Sun

cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:* Versions 2.4.5 Vulnerable ·Linux
cpe:2.3:o:microsoft:windows_2000:*:*:workstation:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:* Versions 4.0 sp2 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:* Versions 4.0 sp3 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:* Versions 4.0 sp4 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:* Versions 4.0 sp5 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:* Versions 4.0 sp6 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:* Versions 4.0 sp6a Vulnerable ·Microsoft
cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·NetBSD
cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·NetBSD
cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:* Versions 2.8 Vulnerable ·OpenBSD
cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:* Versions 2.9 Vulnerable ·OpenBSD
cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:* Versions 5.5.1 Vulnerable ·Sun
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Sun
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Sun

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2001-1244
2026-10-03 Alias added: GHSA-g5fj-94hx-c37v

References

—

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences